Systems Management

You can setup a KACE in a "dark" network. This means: all functionality which does not contain internet access is working well but also support does not have access to fix something, which can be a problem sometimes.
But all main functionality works well.
For patching you need 2 appliances in that case (one is the online one, which has internet access to download all files and one is the offline one, where you manually put the files on) See here: https://support.quest.com/kb/4204315
Setup is not complicated but you need to bring all files (patches and software catalog) to the appliance, which may need a bit of planning for the poeple who do it.

For a detailed configuration (also license wise) you can contact your sales rep.

To also be clear on what Nico is saying from a license perspective, although as an SMA user you are “entitled” to thread instances on one license (live,test and DR) if you choose to have a remote disconnected SMA, that will not be included in your initial license, so you may need to buy a second SMA license.

if you were to make your SMA externally facing then the devices in that remote location would be able to connect to your SMA via the internet. If that is the case then you could also use replication shares to patch and distribute software.